$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bafe3d33-7aa1-3cdc-bdfc-0f08e6ca6c60.roa File: bafe3d33-7aa1-3cdc-bdfc-0f08e6ca6c60.roa (raw, json) Hash identifier: iJD2BOKtX8cSFx9NTxCjgsyJC0GsTDg7xPsgsJKMnEg= Subject key identifier: 96:65:75:31:65:D1:19:40:E1:1A:26:C1:E6:5F:0A:26:91:0B:46:4C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C3734FBE6A08501760D2B70 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bafe3d33-7aa1-3cdc-bdfc-0f08e6ca6c60.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 24.251.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:34:fb:e6:a0:85:01:76:0d:2b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=098c5b60-79db-4184-b3d9-c7b6bd9bd8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:09:0d:6d:8f:fa:ea:00:2f:f7:f6:47:0c:65: 92:97:90:a5:ff:8e:42:d1:13:2b:1c:10:63:8b:f1: e7:bf:b2:9a:1c:db:8d:ba:26:6b:fe:12:b5:f9:3c: b8:e0:36:5d:b9:d2:fa:68:ea:5f:5e:22:5e:0c:8e: 93:8b:9e:db:87:45:3e:b2:dd:a1:a7:03:e1:fe:9e: 03:b6:d3:e3:ae:0b:2a:ef:65:5e:0e:ca:c0:b6:a1: 57:b2:17:99:52:fa:22:bb:11:16:69:9b:a4:04:f3: 14:42:18:f8:38:b4:9d:59:02:8c:87:01:00:ff:16: 4b:c9:b7:49:47:4b:22:a8:1d:27:b1:2f:ed:83:01: c7:25:ab:d8:c4:8b:da:14:bf:f3:76:f4:55:4b:53: 84:8c:85:8b:12:6f:e0:24:3c:b6:10:a1:6a:33:a2: a8:b7:18:ef:d4:51:4f:88:24:9a:18:53:a1:a4:98: 0f:a5:65:5d:88:68:ad:ee:40:5a:02:c9:c8:0a:f0: c1:86:c5:bb:bc:ce:2d:2c:f7:42:54:9c:f3:b0:a2: de:d1:66:90:12:36:61:a8:72:86:39:c3:7b:80:6b: 4a:ac:62:da:04:6e:f1:0b:04:e8:01:85:00:29:ea: 4e:6c:c2:b2:13:ad:3d:46:08:71:c2:6a:fc:18:5c: f5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:65:75:31:65:D1:19:40:E1:1A:26:C1:E6:5F:0A:26:91:0B:46:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bafe3d33-7aa1-3cdc-bdfc-0f08e6ca6c60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:93:5c:03:f7:17:04:4b:15:7b:74:91:e0:f1:0c:f9:55:b5: b0:58:cd:53:33:c4:e3:1c:19:e6:f3:9a:b5:62:f9:85:4d:9d: fd:47:b7:84:df:8e:ea:b5:6d:69:0f:ea:f9:50:4d:9d:ae:6f: 97:a1:f7:67:84:45:c0:ac:53:71:37:b2:6b:a1:29:6d:d5:95: 31:3d:4d:86:a9:cb:4d:0a:05:cd:f9:10:bc:b0:1f:7d:20:50: ac:db:f4:b3:87:bd:f4:48:8e:93:13:a7:19:6b:2b:ef:e3:ed: 59:c8:19:d3:cd:b7:f4:7b:52:0c:e1:1d:77:c5:a9:cb:00:65: 75:69:c3:1e:7d:ae:4f:26:aa:bf:8b:68:a0:3f:e3:d4:ef:32: f2:7e:2d:08:51:33:1c:27:de:2e:d8:36:52:10:ba:42:c6:5b: 9a:0a:e2:4a:3e:b8:72:e6:a8:9a:a9:ac:e4:1c:bd:eb:d1:71: b3:11:3d:b9:c9:af:bc:6d:1e:a5:53:47:30:04:b8:5c:79:12: 13:c8:6a:a2:94:f4:26:97:cf:d6:ac:0d:1a:c2:55:93:13:2b: 03:46:3a:a0:37:2e:58:0d:97:76:70:6f:4f:59:ec:95:60:44: 74:9c:73:d8:9d:ed:d0:e8:fc:8d:8c:4c:41:e8:35:0e:f6:77: 5d:5b:30:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzT75qCFAXYNK3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MDk4YzViNjAtNzlkYi00MTg0LWIzZDktYzdiNmJkOWJkOGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgkNbY/66gAv9/ZHDGWSl5Cl/45C0RMrHBBj i/Hnv7KaHNuNuiZr/hK1+Ty44DZdudL6aOpfXiJeDI6Ti57bh0U+st2hpwPh/p4D ttPjrgsq72VeDsrAtqFXsheZUvoiuxEWaZukBPMUQhj4OLSdWQKMhwEA/xZLybdJ R0siqB0nsS/tgwHHJavYxIvaFL/zdvRVS1OEjIWLEm/gJDy2EKFqM6Kotxjv1FFP iCSaGFOhpJgPpWVdiGit7kBaAsnICvDBhsW7vM4tLPdCVJzzsKLe0WaQEjZhqHKG OcN7gGtKrGLaBG7xCwToAYUAKepObMKyE609Rghxwmr8GFz1QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZldTFl0RlA4RomweZfCiaRC0ZMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmFmZTNkMzMtN2FhMS0z Y2RjLWJkZmMtMGYwOGU2Y2E2YzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaTXAP3FwRLFXt0keDxDPlVtbBYzVMzxOMcGebzmrVi+YVNnf1Ht4Tf juq1bWkP6vlQTZ2ub5eh92eERcCsU3E3smuhKW3VlTE9TYapy00KBc35ELywH30g UKzb9LOHvfRIjpMTpxlrK+/j7VnIGdPNt/R7UgzhHXfFqcsAZXVpwx59rk8mqr+L aKA/49TvMvJ+LQhRMxwn3i7YNlIQukLGW5oK4ko+uHLmqJqprOQcvevRcbMRPbnJ r7xtHqVTRzAEuFx5EhPIaqKU9CaXz9asDRrCVZMTKwNGOqA3LlgNl3Zwb09Z7JVg RHScc9id7dDo/I2MTEHoNQ72d11bMF8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:18:05 2025 by rpki-client